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(54) HIERARCHICAL KEY MANAGEMENT SYSTEM 

(57)Abstract: 

PURPOSE: To establish secret protection between 
terminal users by providing the system with plural key 
permission authority means, corresponding to user 
groups and a terminal means groups and a key 
permission center means for applying authority to each 
of the key permission authority means and permitting 
direct secret protection communication between the 
terminals of different groups. 

CONSTITUTION: A terminal group in the hierarchical key 
management system corresponds to one of user groups, 
and a large number of users can execute secrecy 
protective communication with other users by respective 
terminals SWT through a public exchange telephone 
network. The system has plural key permitting 
authorities(KCAs), and each KCA permits a user in a 
certain group to use a terminal for executing secrecy 
protective communication with another user in the same 
user group. The system has also key permission centers 
(KCCs), and each KCC is connected to plural KCAs to 

provide permission authority to each KCA and permit secret protection communication between 
different user groups. Consequently direct secrecy protection between terminal users can be 
established. 
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t a m u a a « * fx 3 c t «• ri & c * ■& pg s s * 

-filJ/^fiCfi^T. •>EPBBffl*-S«5' 
AH : 

fitraxftisiewicisKsn, «} a £tft @ eta* 

«*#SOf (l/-7T-«r> T, S^^-7"tt«F 

82 351ft @©ffl*S* UTI 2 fflfc^atSUffctr 
}f»E«S*#a©$Ol/-7 : fcSWC 

8582^1 *«fcr/tB 2 iS8*#S«» S382«3i*- 
V 'J r ■< CKKS £ & < , B&823&I3I8W 



2 . Stf82&S*-V V T ■< # : 

a-+f.^fl/-r©8US2i-if*rFfirT&ffla 

®*-8TpI*-V'>> f -<fST3)5t. fi&82*- 
T-* , #Stt^g2^-1f-^^-7'(D<lb©a-*fi: 

fiigiaffi«ajim* 4 7-5fc«»tc<»82J«*#a«ffi 

v y T*¥e«ffo82a£**^/u-7©flis2ffiiifc 
? a ic » « s n s ga 82 a a <o * - ?f w * - v 'j x 

iftS2fflaos*-ffiK*-v y x-e fscse 

$nfc*-8 1 FRHr>*#aT-ajoT, ffiEgTiiJ-fe 
>5'#a«8TRl*-Vyx-r*6uS2*-8 ! FRl3l-- 

v u r-f #a<as*£$a., P4oit^^-7«) 
-STRrt>^#a»c«fcoT«i«^n*cts-i5i9 

fcT&58*JB1Eltt<DlillB39*-gJS5/;*TA. 
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3. ffl^©a-*f !C»(50l»KfiS5t5#a»C»R 

iijfli&{affi«sf&f*8B?e*s 5c*ru, nag 
a*t7-5fc«>»SE, ??3<ba5<fctf«fHbia«**8 

KtC<*5C»tti*n, fiir£«5le?atf 8* liaise 

j: o x etrffi»s« a »flFSH# a « r □ y ? l r 

«i© P8H - ^ ^ r A . 

5. fifrffi»s«a«ifTFsa^s«Mrse«[**s 

»C<* ecfcfcSn* J»K8*#Stf Pj«£0fc5fi 

6. UEi-tf ♦ iTJO-ron.- *f tt. If- tf 

s»js«ff n*c t ffl t-r *a^ii 2 Ktit© 



9. 8!HEiaffifiiafS^saK:s*n«)«ffl*fi«f 

KJS-fctC* o fi5Ei--tf tf8?fc?F5I<* 

10. aBCi-iftfaeaaase* otb 
s/2tac<b^t, as2iJ8B3!*-aas'*TA 

s ^ ;i/ _ 7 ^ i - «f O SB ^ /I/ - T tC » (6 y * 

so se a a 0 a « * « * x ffi © a - tf t » e> » u 
» £ «& a i - * a * t- a e eg a a <§ « ft 3 c t * 

^ ^ _ 7 en, fib © a - tf t a e « a a £ * R "5 * «> 

tc60S2SI*?a*««'i r « >:: ^^^^ u ' * fcfet 
S4ofca-V-^A'-7'©^A'-7 , a©ajB« 

c t * rata £ r *fgB32* -si -> * x a . 
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s LTaaB«aa^*fi^ . iJii£Sffl*tf&a© 

t»E2o©ffl5ttPdT-i8«©eai*tT-5fc«)aa 
ssa^as^^Ktts-TCT-rsafg: 

BEaa«!>*-yyT-r«!>flF3fl:*-©Trtt 
K2o©«*faT-ftS1b*-*2»*aaiB : 

a * C » L/ T £ * © 2S 35 <fc V 4= - *t * i* £ U , 

«5 S2 2 o © a « ? n /t a 3fc a t © a m « a a it «• 
sj c ? •& a a :«<ttf 

3iet*st7»naaeissaii©fc«>s«*K 
ra*r©SB2©&£bfc??*§ft;/s*nb 
#? z>®pski & o xmi8.$ nscf* & 

s. aE«a»fpSB€i58ea5t5ca\u, » 
is-r'aa5fc©£^-iftf«BE#a3aii£fr'&;t-5 

f*a«ii7 saa©75a. 



3 . ^©sea* 
*aaf** aE«aaft6w»*as3i<§^^x 

©»*eas»4 : -ga->^7 i /»cB9irSo 

<£*©£«? > 
f^SW^^-ga^^^Att, 1 9 8 6?3fl 
25BJ. iA-a- hW«Ctt5<*nfc*IH3S ! F 
SB4. 578,531 §Ci3nT^5, C©JEf!Uttx a 

sB«araa© a* (cjg^enfc* - 

^Es^r aski***. affifita©«*x- $> 
isa*#air*a&. s*jg*tt*-#ffit>* t 
©att^aft ^* < x B&sfc^. cntci:?)* 
-^Be-tv5««, a*©B«a2*t7^, 
affi«s©#«r**t7?<5». 

T©2-p©a*pa© j en ; en©a®«aiaiiicffl 
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35IC, ia«)i'7fAB, «ffift8tf&Bft 

« {SEE «£L*3£ i: <0T-££ KB 3? WE- 
ARS' *xA*ffi(ft*aCi:C«a., 

(SJH*IW{*?afc«>©?8) 
fcSWaSW^JiJKTafc^tf&fcBBS!* 

# 2 & 3 SS @ 8 ffl * ft & T & » ® « 3 51 £ * *F Rj 



C) ttC(0i'^fA«)*KS4t*-V i ;TU- 
35*. KCCB, * - *K - h" , S * ffi * » A - K 

ry >5>«J:tfaffifll-f *-f **** (net- 

work interface terminal : N I T) 

SKCA«J:yKCCB, &&X&SSIsU9« 
«-a*UTKCA»J:CfKCCWS5$K<0^a^ 

8 £ fciy'fl&'easa. 3ookcab, 

t^b, u**-yyy^ct»*. utfb» k 

CCtC4oW±©KCA*»«r*C:tt)PlSET- 



HRl ¥3-89737(3) 

-V!)f -f (Key certification authority : K 
«, a-*f • ^^/-7<0a-1f tf ±Se<Oa -If • 

t > * « pf «5 * - v y x ■< «■ « * - » *J # - v y 
(na«) 

— 8T5I"fc>* (hey certification center: KC 



Ha^-V'Jf ^OSKCAB, 500R1 
C2-f*t0»5i: fctf pJHT-S5&tf , 

ga-+F<3D^fl/-TA , B , <8 <fc (/• C « , #3?tt 
ICttSH5 0 0WtaE«3J9SS«* (secure 
wireline terminal : SWT) »c <fc ? T AUKS n 
S, i-fcB, a-<f • {W/-7toV 1 ^Hi 

gSWTB, h57-f ?i"*-OHK{i!a3i 
jftffl<&#»ft*-£?l±-!ra. SWTtt, i8*0 

( security activation device : SAO) 
3. COSADtt, SffllCKCAICJ:t)T7a^ 
5A?n, R^TSWTlO:5TB7o77AS 
nsaiWii^-f®*. CWSADtt, Klffi« 
35i(i©*t/i-tf<oaS*pl8Hcrs/!:«>(CS 
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^-»(o*-b, a**-yy?-< (kca) k 

«fc o TKSISn*. 2oU10KCAStlf5^ 

«f £©jsg«- ISM-iranl c©®£, 

C«cea$nfcKCAJC«fcoTS ! FiU5n^<Ttt 
Ll-f (D iftig? ^ — V 'J T ■< (KCA) 

7T5Cttfr-es. una, ^--tr^^ffoT 

-V'JT-f (KCA) £<fcoX*>-KSAD 
(seed SAD) , » * * A* 7 - K 8 

RSnS. COJ/-KSA0B, ^1^*tJ6fi 

«U)SA0T-8Si:t/i'6i»«)*i*ll, *© 
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SAD/)»5ffl>*Wi--|fiCB8?-§taffifiiai8ffltf 
R$3n4. C©->- KS A D«, i-*f©SaSJ 

a-*ftt> SWTlca»CSADSBAT4i: 
£tC J: ^ T?FRjeSW*C £ 5J Ae X 35 ■& . ifcC 

*r umi) <o®tmx -vj -T -t t- & & k c a 

SAD©J:tf A'*9- KS.ffilUT, J.-<f«® 

£ 5 JC , «S8£©a-*f I! * © S W T T- FF pJ 
SSIUC fctf pJfllX353>. SWTIfc^fcO© 

Oa-fB, Jg) i; US HE — VUf^OIOi- 
*ft, JtBi!!Ht5nfct-Hlil5J:ff20(!) 

jg**3itsuxrT*>n.5#K7atr;*«/rox, 



&®©KCC***¥*aflS©:i-- , f£Mffi«aj§ 

t^Rjeixass. -rfcfcs, a-tf • 

^A/-rA»C»-5-*a-1fB^^^-Tlca-r-2) 

SWTffli-f #-K?f5J££W&£, COi- 
*f«, ii&S&SSSIsllSffl (public switched 
telephone network : PSTN) 2 « ffil <D lal 19 

ffi«a>18SX3>&*:SX*5a£i*££n3£:, S 

wT±©Bffi«a# >#ff<*n3. its© 
aa«c«y*2o©swTBS ! fRix-^*3?jftb> 

©ft£xta8r«aa*itf artt* *. cchwsj: 
viaffiaara t:^©-S5 1 , ffi©/\*-f-< 

© £3 SJ a? V « © tS S (8 8 U ^ A/ © J: 3 S 51 

i-tf ©?tpJ©B&j5X-, KCAttfSWa-K* 
5fpJ3nx<r>*>a-*f©SAD2fc«*-CttMl 



■3-*.i:©J--ifwSAD©tlW«c^ii^, no 

a-7«S#©SAD*?5rF«>JTa<fc-3IC£JJl<* 

na. ?5STRj©fc«>c«, i-*f «&»©/\*^7 

-KJS^lfSAD^ffifflUTlfiJaKCA*!!?^. 

pfWRi©H. ja^tiKCAc^oTS^Risn^rf 

*9©lf«»5?#ft/«^(k*-©-«ta-*f © 

-ja. t> uo.-if tftovna cjfcjio x k c a 

fiStlT^*. KCCe«t(fKCAtt«2-f s 
fcttSWT?)liAffi + -«'it4(r\ ttoT, t> 
UKCAttaKCCC^fn/inotffeRCS 

ssnassft, *-ea^^T/»rt©±x© 
KCcafcttKCA#ja»t:$5anx^*d:, 

^-V'Jf-ftDftllltt, KCAtfKCCtC* 
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nana. z<D£ttt y ps t n »c <fcaaffi«8 

7Qt^^Sffi LTfrton*. -BKCAtfKC 

cessans*, k ca wffl^©i-tf ©5<frI 

- +f tt <fi<D Jft « * - V 'J X -f • 

♦ ^/u-TA, BSfcttO oa-tf tHEWic 
a *§ * * * c t # v a & . 

ts fi5 w & * a a n x * i> \* - « « * s <i -r * fc «> » 

fflBJW*HBT-KCC(C«UTWrF«iirai2^* 
Stfi* •S&Ktffc*. KCAiKCCtOHT-R 

wt tKC a tw&vftton&Si nmmtm&T: 

£ (unauthorized key list : UKL) l> 
#E*&o :«JUKL08fiB. V7tA©81 
€/rL/Tf7t>n*. KCAB, CtlSOSSWT 



^^ttK] ¥3-89737 ( 5) 
( Lockout packet) T$oC(Df - * tt K 

cesarean, pa-Ajuu k Ls-gBr-r*. 

SWTCtfRan*. U K L±T-(Oa-tf tC«T 

ftaffi«ajaiattswTu:*oTe«)Wici»±5 
na. tiOCOffl«i:KCCtf!2W5nT^'Si ) > 

UKLttKCA^tC^WSn*. 
KCAIC^^Ti'-KSAO^fPSnfc^jSA' 

an*) 32, ?&*>'5M<;&*a'»7*ai£, * 

-flJ/^T^BKStaSADCffiffl^ESO, 
SEU3!)»OCniC«^&llff KCACJ: 

oT-Ra-tftffFRjanat, 2o©swtb3 
ic n as « a a e s a *■ nt si t a fc » c « * # e 
«5lcH©*©ii<itf<&S fcfc*. c n 6 <7> a 11 ic 

na. a-iftf e#©s wT©«affifflai? 

> * U fc « £ , -il«D?<yt-vtfSWTiaT- 

jE&ana. co5?»a n-&«?8<&sso/>>«, s 

WTOtfiCfi- > * /US 14 £ * . 



3J20B, SWTOi-f 1 A tSWT© a- 
5 Ai:<&fig<&BiB«a88S**?. SWTOi 
-<f 1 Ai5AB, la-O^B^fiO^-yU-r 
r-f , *fct>6, SB20«C^TKCA A«C*o 

xsTRian**©* uisen*. aTosjw« 

SWT 1 A <!: 5 Atf^nSWS A D (fflffiffa 
IHrSH) ^-^KKriCgFRl OTt^SiKS OT^ 
4. CfflctB, SWT 1A33*tf5A*KC 
A ACSfcTT&eiCJ: ox^an, /J»oSFPia 

nfcSAD*-tcJ:oT^an*. ^nedKr©^ 

SWT 1 At 5Att, C^n^C^frW 

SWT 1 A6*tf 5 Aaia@8*/H/^? 

TW 1 A<D«S«8»U*2 enc 
«fcoT, PSTN*8AUTgB)< y 

tfsatean, twiss, swt utSAto 

Htcraffi<S8©anfc2400tf-©g8 8tfl« 
Stan*. 2 4 00#-<&fcj8i8tt 1 

wsianfcT-i'eiSiSB, ^rn©f-* • u 



-M-«?T*SWTICJ:oTSf7«n4„ 
f 1S 

Ex - a-lfaUffUfK^h/U 
Dx - a-yrofifUfS^hA/ 
Exa - t-c^-vyf^ilf^ h;u 
Dxa - *-<&tf-7 U t •< S^ft^? h/l/ 
Eax - V 'J x -r ST i>J ?? ^ * 

r* A/ 

Dax - V U r -r RUgJBfl:^ 9 

r* A/ 

Ec - *-©frRl?l*Ht'^ r-A/ 

dc - ^-rorrga^ft^^r*/!/ 

Exts- a-+f©STpm3<b^?r-A/ 
Dxts- a-tf^STpJffl^lt^^r-vu 

S2-fB, ^^©STRranfcSAD*-^^ 
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Ttt7?-t*/sa«;>< 9 iz-vzx&tz. cn 

505*yiz-J?«, lOCt-V'JfvID (K 
CAflSSBJ) , - a > # *§ » DaxfflHIBf 
-S , I D ( KCCW3S9J) , a >S 

ofv 7K>m%zm?z>. piswT«>s<§snfc 

AD#KCA»C*oT?FpI5n*(0T-, 

— S/r jtfi C & o 

— i? (Authentication Packet nessage ) £25*. 

A?Tl>«>. cn5B> a-+f<0 I D 

♦f-f > ( I D signature : I D S ) , a - tf<D I 
0, S A D<0'> 7*i§ (SAD serial 
nunber : SSN) . 7?tr;*ia«K 
7;uS*§ (Terminal serial nuaber : T S N ) , 
C*tfa-'«r0I l ri»I3ftfc*8**-Ex tT8 

aiSK* ^y7hHM < Crypto Sync : CS) 
>yt-»;. A <>- y htfgSWTCi^TRSS 
h5. SWT 1A«J:Cf5AB. ft C P S T N 
*g*UTi7'>>rr-iaiW (CS) * y 1* - 2? • 
-5ry-h*SE»Tft- SSWTtt, &ICflfi©SWT 

i?'J7"r*l5Hfi^fl3-^WS<iKg«CJ:i>TSaa 
?h, ir uV hWJB*W*. 9\ ) 7 b IB) Jfl S 0c 

shjt, gswT«i»ci-vic. affifis 
fESsatfjara*^-* u-r-T-HtSLsnfccfcs- 

fcL2o<0SWTI8l<0iHItf2400#-- f 

-r-Tt7»n*®^, ±E©«affiffiasas«*> 

T-^3?ft«C«UTRR73ie)X7-SE (forward 
error correction ) # fie" BJ 3 ft * » 
SB 3 0 T* « , SWT2-f1A»5SWTa- 

tf 7 B^<D«Bfii!aaa€-wiflir*o swu- 

f 1 AttKCA A«C«fc o TSTRjSnT^a. S 



^^UaT 3-89737 (6) 

s(gu, ch**at4iaa*-oax«i8i>T 

fflfi**. SSWTttfi&fi©^*!!** 
-Ext*3ISffl*. flSJS^i-lf © I D#SW 

ftc, SSWTB1o(07>?/»«» (Randoa 
CoBPonent : RC) <&2o<&na:3tr-£??£0, 

custtK oo*--r >^tcffiffl$n*. rco 
otfusaa^K oicKissn*. rc 

©ffiOat-Bi^ioa-f Ex t £fflfc">T?Jf§ 
ItJh*. gSWTB, eKORjSr^V^AfS^ 
^ y iz-V • /\**y h*flfi^«)i-VlcaS(iU, 

cnttflfi^<oa-if e xT-fjfUt^na. ssw 

Ttf«S£<D7>2*/xlfc#;*i'te-2 ? *'\*'!> r y b£ 
gi^4t, OxtSffl^T^O/^y^a^ 



WTi-f 7BB, 35 6 # U«KCA B «C <fc ? 
TffoFSnT^S. £in«, SWT 1 AcKC 
A At(0B8J:lfSWT 7 B £ K C A Be 
(OiawWStC J: ? T? hfhSJhS. KCA 
A35<fctfKCA Btt*-ST«iJt:>'* < KCC) 

SWT 1A33<fctfSWT 7Btt#ta85«a<D 
ttST-PSTNS/fbTfflSCffiRjnS. SW 
T 1 A©a-*f tt> I9ffiffi8«>u#* >*»b, 
*©*S£, 7?l22/««> y*-5* • 

tfSWT i At 7 b tfaicas^sn*. ens 

©7^-t2^/MHlJ< y t-?BKCC I 

y hB-ST*. HftotKC 

ccs* *swTs©eifB(S!aiia«, c©->;* 

f AOTX-BS«>5hT^4li». 

KCAT-«*<KCCroi^-tt«C<fcoT-atf 

fljsnawT, s WTO©**©* y •fe-s'saii 

tt, ±S$©&5§&KCA©«StttPifcofc*)0 
tc££. C<0«S©SWTgl<&ft<O* y t-P • 
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*>tv r-©B£tta»A , >r v h (Registration 
Packet ) tmiti&. zoa&rt'ry t-e«T 
©««iT-fli/«;*na. tftto^cneii. 

fr3 KCA©# (Dax ) . KCA 

©ID35<fctf£KCAICfH*a7?fc:*ffifflT-35 

yh^fgU, %®<D®m*-0 C«ffll>T«S 

<tra. estux. sswt ttte75©#w«si 

lfc*-Dax£foffi?S. 8SWT#ft^OKC 
fifcna. =&0KCCOID«5<fcVA-^3>^ 
fcgK SSE^C y • h SWT 1A 

£7B£©iST-2»an3. Ba/^!' h • * y 

S»X>t-?-/^* htfSWT 1 A t 7 B 



K C AC«T*e«)OfF?ie. SWT±OSA 

Dcay*K CA.©8«)©,«fqi £mufi&?fjt> 

n*. K CAC»*a®3D©?F»J©fce>, 
S(DKCAC3t}LT/\*^9-K«<fcCf^-KSA 

KCA ASfcttttK^-Vyf^Att***- 
V';r-r K C C «C KJEfSafeSa! StlT 2> „ « 
E«a<E3SI8tf W£L3n* £ , KCABSTRl«!ffl 
A* -!r y r* £ iS . ^(OAt? hB« * - V 'J r 4 

oi&%\v<<y ( ids) , a^cj/yyA/fg 

(TSN) , Exa, Oaxa^VSADO^J 
7/U8« (SSN) *£€r. 
KCCB, a-*f*»Rl* 3«&CKCA#K 

cc©fc«)«ci!iff!r*ct*«Bt*a»/^y 

h€-ffifflL/TKCA(Ct5S-r«>. KCC 
ttKCAICD5'?7 l ?h • A<r> C 

n « as s n x a ^ * - © - n & £ ^ q - a ^ 

ft«<§ft*-D ail/N'^f r-tt8r$lC 



^ Wlffl-T 3-89737(7) 

£©IHT-£ft$ n*. Pitf, Cfflfflifeiaoj: 
3C#a©KCA»C*lUTf7*>ns>. ? 
'J7hlS|ffl^yt-f •A^r? htfSWT 1A 

a. . 

«jc»*swTHT-o«iffi«aji5S*fTf>a^. 

8iU-h«24 00*-i:iS?fti:, 2o© 

s w t t od la ffi « a a si * k 4 -r * © c s ^ * 

Tfr*4t*«6, R^SK CA*fF«iJ UTO-S> K 
CCB, KCA©Ay?7y7iOTl!>ft<iJ8ET- 
35*. a-1f • 9fo-y • A * 2 7 >7B, i - 
1f< 7^-7A, B33 <fctf C© J: ^ £ iTta © i 

+^-tT^«fTOTt'"&(r'»KCA©/^5'^72'7'* 

f-7/)!KCCCa-K3n*. C © J: ^ « j£ 
T-a--»f €-8*51? -Sfctt, KCCttKCAttT 
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